DEC. 7.2005 6:37PM CHOATE HALL & STEWART 61 7248400(^ ECE | V ED Na 714 P ' 3 

CENTRAL FAX CENTER 

Application No. 10/083,324 Docket No. CTX-079 

DEC 0 7 2005 

AMENDMENTS TO THE CLAIMS 

Upon entry of this amendment, the following listing of claims will replace all prior 
versions and listings of claims in the pending application. 

IN THE CLAIMS 

Please amend claims 1> 16, 33, 45, 51-52, 57, and 68 as follows: 

1 . (Currently Amended) A method of authenticating a client to a content server comprising 
the steps of: 

generatin g, by a ticket authority, a ticket associated with said client, said ticket 
comprising a first ticket and a second ticket wherein said second ticket is disabled from use; 
transmittin g, by said ticket authority, said first ticket to said client; 
validatin g, bv said ticket authority. said first ticket; 

usi ng, by said client said first ticket to establish a communication session with a 
content server proxy after said first ticket is validated; 

enabli ng, by said ticket authority, said second ticket for use upon said validation 
of said first ticket; and 

usin gjry said content server proxy, said enabled second ticket to establish a 
communication session with said content server. 

2. (Previously Presented) The method of claim 1 wherein, prior to generating said ticket 
associated with said client, said client is authenticated to a web server. 

3. (Previously Presented) The method of claim 1 wherein said ticket authority transmits said 
first ticket to a web server and said web server transmits said first ticket to said client. 

4. (Previously Presented) The method of claim 1 wherein said client transmits said first 
ticket to said content server proxy. 
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5. (Previously Presented) The method of claim 1 wherein said content server proxy 
transmits said first ticket to said ticket authority and said ticket authority transmits said second 
ticket to said content server proxy upon validation of said first ticket. 

6. (Previously Presented) The method of claim 1 wherein said content server proxy 
transmits said second ticket to said content server upon said enabling of said second ticket. 

7. (Previously Presented) The method of claim 1 wherein said content server validates said 
second ticket with said ticket authority, 

8. (Previously Presented) The method of claim 7 wherein said content server makes a 
request to said ticket authority to validate said second ticket. 

9. (Previously Presented) The method of claim 7 wherein said ticket authority pushes said 
second ticket to said content server for validation. 

10. (Previously Presented) The method of claim 1 wherein said ticket authority transmits said 
second ticket to a web server and said web server pushes said second ticket to said content server 
for validation. 

1 1 . (Previously Presented) The method of claim 1 wherein said ticket authority transmits said 
first ticket and said disabled second ticket to a web server and said web server transmits said first 
ticket and said disabled second ticket to said client 

12. (Previously Presented) The method of claim 1 1 wherein said client transmits said first 
ticket and said disabled second ticket to said content server proxy. 

13. (Previously Presented) The method of claim 1 further comprising transmitting said 
disabled second ticket to at least one of said content server proxy and a web server. 

14. (Previously Presented) The method of claim 1 further comprising transmitting said 
enabled second ticket to said content server proxy. 
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15. (Previously Presented) The method of claim 1 wherein a communication session protocol 
is established between said client and said content server. 

1 6. (Currently Amended) The method of claim 1 wherein a first communication session 
protocol is established between said client and said content server proxy and a second 
communication session protocol is established between said content server proxy and said 
content serve r, said client communicating with said content server via said first comr ^micsffiqn 
session and said second communication session , 

17. (Previously Presented) The method of claim 16 wherein said first communication session 
protocol is different from said second coxxmaunication session protocol 

18. (Previously Presented) The method of claim 1 wherein a first communication session 
protocol is established between said client and said content server proxy and a second 
communication session protocol is established between said client and a web server. 

19. (Previously Presented) The method of claim 18 wherein said first communication session 
protocol is different from said second communication session protocol. 

20. (Previously Presented) The method of claim 1 wherein said client comprises a web based 
browser. 

21. (Previously Presented) The method of claim 1 wherein said content server proxy is a 
secure socket layer relay. 

22. (Previously Presented) The method of claim 1 wherein said transmitting of said second 
ticket to said content server proxy further comprises transmitting an address of said content 
server to said content server proxy. 

23. (Previously Presented) A system for authenticating a user comprising: 
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a content server; and 

a content server proxy in communication with said client, said ticket authority, 

and said content server, 

wherein said ticket authority generates a ticket associated with said client, said ticket 
comprising a first ticket and a second ticket, 

wherein said first ticket is transmitted to said client and used to establish a first 
communication session with said content server proxy, and 

wherein said second ticket is transmitted to said content server proxy and used to 
establish a second communication session with said content server. 

24. (Previously Presented) The system of claim 23 wherein, prior to said ticket authority 
generating said ticket associated with said client, said client is authenticated to a web server. 

25. (Previously Presented) The system of claim 23 wherein said ticket authority tr ansmit s 
said first ticket to a web server and said web server transmits said first ticket to said client. 

26. (Previously Presented) The system of claim 23 wherein said client transmits said first 
ticket to said content server proxy. 

27. (Previously Presented) The system of claim 23 wherein said content server proxy 
transmits said first ticket to said ticket authority and said ticket authority transmits said second 
ticket to said content server proxy. 

28. (Previously Presented) The system of claim 23 wherein said content server proxy 
transmits said second ticket to said content server. 

29. (Previously Presented) The system of claim 23 wherein said content server validates said 
second ticket with said ticket authority. 
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30. (Previously Presented) The system of claim 29 wherein said content server makes a 
request to said ticket authority to validate said second ticket. 

3 1 . (Previously Presented) The system of claim 29 wherein said ticket authority pushes said 
second ticket to said content server for validation. 

32. (Previously Presented) The system of claim 23 wherein said ticket authority transmits 
said second ticket to a web server and said web server pushes said second ticket to said content 
server for validation. 

33 . (Currently Amended) The system of claim 23 wherein a disab l ed tbesecond ticket is 
disabled and k transmitted with said first ticket to said client. 

34. (Previously Presented) The system of claim 33 wherein said ticket authority transmits 
said first ticket and said disabled second ticket to a web server and said web server transmits said 
first ticket and said disabled second ticket to said client 

35. (Previously Presented) The system of claim 33 wherein said client transmits said first 
ticket and said disabled second ticket to said content server proxy. 

36. (Previously Presented) The system of claim 33 wherein said content server proxy 
transmits said first ticket and said disabled second ticket to said ticket authority and said ticket 
authority enables said disabled second ticket. 

37. (Previously Presented) The system of claim 36 further comprising transmitting said 
enabled second ticket to said content server proxy. 

38. (Previously Presented) The system of claim 23 wherein a communication session 
protocol is established between said client and said content server. 

39- (Previously Presented) The system of claim 23 wherein a first communication session 
protocol is established between said client and said content server proxy and a second 
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communication session protocol is established between said content server proxy and said 
content server. 

40. (Previously Presented) The system of claim 39 wherein said first communication session 
protocol is different from said second communication session protocol. 

41. (Previously Presented) The system of claim 23 wherein a first communication session 
protocol is established between said client and said content server proxy and a second 
communication session protocol is established between said client and a web server. 

42. (Previously Presented) The system of claim 41 wherein said first communication session 
protocol is different from said second communication session protocol. 

43. (Previously Presented) The system of claim 23 wherein said client comprises a web based 
browser. 

44. (Previously Presented) The system of claim 23 wherein said content server proxy is a 
secure socket layer relay, 

45. (Currently Amended) A system for authenticating a user comprising: 

a client; 

a ticket authority generating a ticket associated with said client, said ticket 
comprising a first ticket and a second ticket wherein said second ticket is disabled from use; 
a content server; 

a content server proxy in communication with said client, said ticket authority, 
and said content server and receiving said first ticket; and 

a web server in communication with said client and said ticket authority, 
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wherein said content server proxy establishes a first communication session 
preteeei between said client and said content server proxy after said ticket authority validates 
said first ticket, 

wherein said ticket authority enables said second ticket after said validation of 
said first ticket, and 

wherein said content server proxy uses said enabled second ticket to establish a 
second communication session with a p rotocol being different from said first communication 
session protocol. 

46. (Previously Presented) The system of claim 45 wherein said client is authenticated to said 
web server. 

47. (Previously Presented) The system of claim 45 wherein said ticket authority transmits 
said first ticket to said web server. 

48. (Previously Presented) The system of claim 45 wherein said web server transmits said 
first ticket to said client. 

49. (Previously Presented) The Systran of claim 45 wherein said client transmits said first 
ticket to said content server proxy. 

50. (Previously Presented) The system of claim 45 wherein said content server proxy 
transmits said first ticket to said ticket authority. 

5 1 . (Currently Amended) The system of claim 45 wherein said ticket authority transmits said 
enabled s econd ticket to said content server proxy. 

52. (Currently Amended) The system of claim 45 wherein said content server proxy transmits 
said enabled s econd ticket to said content server. 
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53 . (Previously Presented) The system of claim 45 wherein said content server validates said 
enabled second ticket with said ticket authority. 

54. (Previously Presented) The system of claim 53 wherein said content server makes a 
request to said ticket authority to validate said enabled second ticket. 

55. (Previously Presented) The system of claim 53 wherein said ticket authority pushes said 
enabled second ticket to said content server for validation. 

56. (Previously Presented) The system of claim 45 wherein said ticket authority transmits 
said second ticket to said web server and said web server pushes said second ticket to said 
content server for validation. 

57. (Currently Amended) The system of claim 45 wheiein-a- disabled Aesecond ticket is 
disabled and i s transmitted with said first ticket to said client. 

58. (Previously Presented) The system of claim 57 wherein said ticket authority transmits 
said first ticket and said disabled second ticket to said web server and said web server transmits 
said first ticket and said disabled second ticket to said client 

59. (Previously Presented) The system of claim 57 wherein said client transmits said first 
ticket and said disabled second ticket to said content server proxy. 

60. (Previously Presented) The system of claim 57 wherein said content server proxy 
transmits said first ticket and said disabled second ticket to said ticket authority and said ticket 
authority enables said disabled second ticket. 

61. (Previously Presented) The system of claim 60 further comprising transmitting said 
enabled second ticket to said content server proxy. 

62. (Previously Presented) The system of claim 45 wherein a communication session 
protocol is established between said client and said content server. 



4019359 - 9 - 

PAGE 1 W20 * RCVD AT 12ff/2005 6:32:33 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/28 * DNIS:2738300 * CSID:6172484000 * DURATION (mm-ss):04-54 



DEC. 7.2005 6:39PM CHOATE HALL & STEWART 6172484000 NO. 714 P. 11 

Application No. 10/083,324 Docket No. CTX-079 

63. (Previously Presented) The system of claim 45 wherein a third communication session 
protocol is established between said content server proxy and said content server. 

64. (Previously Presented) The system of claim 63 wherein said first communication session 
protocol is different from said third communication session protocol 

65. (Previously Presented) The system of claim 45 wherein said client comprises a web based 
browser. 

66. (Previously Presented) The system of claim 45 wherein said content server proxy is a 
secure socket layer relay. 

67. (Previously Presented) A system for authenticating a user comprising: 

a client; 

a first ticket authority; 
a second ticket authority; 
a content server; and 

a content server proxy in communication with said client, said first ticket 

authority, and said content server, 

wherein said first ticket authority generates a first ticket associated with said client, 
wherein said second ticket authority generates a second ticket associated with said 

content server, 

wherein said first ticket is transmitted to said client and used to establish a first 
communication session with said content server proxy, and 

wherein said second ticket is transmitted to said content server proxy and used to 
establish a second communication session with said content server. 
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68. (Currently Amended) A system for authenticating a user comprising: 

means for generatin g, by a ticket authority, a ticket associated with a client, said 
ticket comprising a first ticket and a second ticket; 

means for transmittin g, by said ticket authority, said first ticket to said client; 

means for usin g, by said client said first ticket to establish a first communication 
session with a content server proxy; 

means for transmittin g, by said ticket authority, said second ticket to said content 
server proxy; and 

means for usin g, by said content server proxy, said second ticket to establish a 
second communication session with a content server. 
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